Use native node:vm module when available (#10621)

Author: petebacondarwin

.changeset/upset-ducks-sin.md

@@ -0,0 +1,7 @@
+---
+"@cloudflare/unenv-preset": patch
+---
+
+Use native node:vm module when available
+
+It is enabled starting on 2025-10-01 or when the `enable_nodejs_vm_module` compatibility flag is set.

packages/unenv-preset/src/preset.ts

@@ -78,6 +78,7 @@ export function getCloudflarePreset({
 	const domainOverrides = getDomainOverrides(compat);
 	const wasiOverrides = getWasiOverrides(compat);
 	const consoleOverrides = getConsoleOverrides(compat);
+	const vmOverrides = getVmOverrides(compat);
 
 	// "dynamic" as they depend on the compatibility date and flags
 	const dynamicNativeModules = [
@@ -92,6 +93,7 @@ export function getCloudflarePreset({
 		...domainOverrides.nativeModules,
 		...wasiOverrides.nativeModules,
 		...consoleOverrides.nativeModules,
+		...vmOverrides.nativeModules,
 	];
 
 	// "dynamic" as they depend on the compatibility date and flags
@@ -107,6 +109,7 @@ export function getCloudflarePreset({
 		...domainOverrides.hybridModules,
 		...wasiOverrides.hybridModules,
 		...consoleOverrides.hybridModules,
+		...vmOverrides.hybridModules,
 	];
 
 	return {
@@ -557,3 +560,39 @@ function getConsoleOverrides({
 				inject: { console: "@cloudflare/unenv-preset/node/console" },
 			};
 }
+
+/**
+ * Returns the overrides for `node:vm` (unenv or workerd)
+ *
+ * The native vm implementation:
+ * - is enabled starting from 2025-10-01
+ * - can be enabled with the "enable_nodejs_vm_module" flag
+ * - can be disabled with the "disable_nodejs_vm_module" flag
+ */
+function getVmOverrides({
+	compatibilityDate,
+	compatibilityFlags,
+}: {
+	compatibilityDate: string;
+	compatibilityFlags: string[];
+}): { nativeModules: string[]; hybridModules: string[] } {
+	const disabledByFlag = compatibilityFlags.includes(
+		"disable_nodejs_vm_module"
+	);
+
+	const enabledByFlag = compatibilityFlags.includes("enable_nodejs_vm_module");
+	const enabledByDate = compatibilityDate >= "2025-10-01";
+
+	const enabled = (enabledByFlag || enabledByDate) && !disabledByFlag;
+
+	// The native `vm` module implements all the node APIs so we can use it directly
+	return enabled
+		? {
+				nativeModules: ["vm"],
+				hybridModules: [],
+			}
+		: {
+				nativeModules: [],
+				hybridModules: [],
+			};
+}

packages/wrangler/e2e/unenv-preset/preset.test.ts

@@ -377,6 +377,39 @@ const localTestConfigs: TestConfig[] = [
 			},
 		},
 	],
+	// node:vm
+	[
+		{
+			name: "vm disabled by date",
+			compatibilityDate: "2024-09-23",
+			expectRuntimeFlags: {
+				enable_nodejs_vm_module: false,
+			},
+		},
+		{
+			name: "vm enabled by date",
+			compatibilityDate: "2025-10-01",
+			expectRuntimeFlags: {
+				enable_nodejs_vm_module: true,
+			},
+		},
+		{
+			name: "vm enabled by flag",
+			compatibilityDate: "2024-09-23",
+			compatibilityFlags: ["enable_nodejs_vm_module"],
+			expectRuntimeFlags: {
+				enable_nodejs_vm_module: true,
+			},
+		},
+		{
+			name: "vm disabled by flag",
+			compatibilityDate: "2025-10-01",
+			compatibilityFlags: ["disable_nodejs_vm_module"],
+			expectRuntimeFlags: {
+				enable_nodejs_vm_module: false,
+			},
+		},
+	],
 ].flat() as TestConfig[];
 
 describe.each(localTestConfigs)(

packages/wrangler/e2e/unenv-preset/worker/index.ts

@@ -698,6 +698,36 @@ export const WorkerdTests: Record<string, () => void> = {
 			/not implemented/
 		);
 	},
+
+	async testVm() {
+		const vm = await import("node:vm");
+
+		assertTypeOfProperties(vm, {
+			Script: "function",
+			constants: "object",
+			compileFunction: "function",
+			createContext: "function",
+			createScript: "function",
+			isContext: "function",
+			measureMemory: "function",
+			runInContext: "function",
+			runInThisContext: "function",
+			runInNewContext: "function",
+		});
+
+		assertTypeOfProperties(vm.default, {
+			Script: "function",
+			compileFunction: "function",
+			constants: "object",
+			createContext: "function",
+			isContext: "function",
+			measureMemory: "function",
+			runInContext: "function",
+			runInNewContext: "function",
+			runInThisContext: "function",
+			createScript: "function",
+		});
+	},
 };
 
 /**